Numerous information systems projects often fail to meet adequate security standards, posing risks to the system and the organization. Through the Information Security Risk Management Program for CGRC, this course equips you with the comprehension of information security principles and expertise in risk management. Initially, you'll delve into risk management frameworks and concepts. Subsequently, you'll delve into information security principles and controls. Finally, you'll master addressing legal and regulatory compliance requirements. Upon completion, you'll possess the requisite information security risk management skills and knowledge necessary for the Certified in Governance, Risk, and Compliance Examination. 

This course will cover:

• Information Security Risk Management Foundations
• Introduction to CGRC
• The Systems Authorization Process
• System Security Engineering
• Principles of Information Security
• Risk Management Frameworks 
• Risk-based Control
• Security Controls and Practices
• Third-party Hosted Information Systems
• Legal and Regulatory Requirements
• Regulations and Standards

Who should take this course:

• Mid to senior-level professionals in compliance, risk management, corporate governance, or internal auditing.
• Individuals seeking to advance their careers in GRC or related fields.
• Professionals with a business, law, or finance background looking to specialize in GRC.